CVE-2014-2956

no score yetEPSS 4.2%

avg: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.

ScriptHelperApi in the AVG ScriptHelper ActiveX control in ScriptHelper.exe in AVG Secure Search toolbar before 18.1.7.598 and AVG Safeguard before 18.1.7.644 does not implement domain-based access control for method calls, which allows remote attackers to trigger the downloading and execution of arbitrary programs via a crafted web site.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2014-07-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

avg:safeguard
avg:secure_search_toolbar

References

http://www.kb.cert.org/vuls/id/960193
http://www.kb.cert.org/vuls/id/960193

Check your stack JSON